General

  • Target

    66441a347f52ca84064076fabbf1b2000601f57ed9c14efa5f6eb6e16b2d2eaf.exe

  • Size

    57KB

  • Sample

    250119-sjnhdaspbs

  • MD5

    5c0ef68df5b0e2ddd3fe0cae13603427

  • SHA1

    ca7111f6fbb92c7d2a3d730af92fc8cb05747b07

  • SHA256

    66441a347f52ca84064076fabbf1b2000601f57ed9c14efa5f6eb6e16b2d2eaf

  • SHA512

    2b10b2e9458fc22dc17678613dbef840da8bfe333c695c6290e389858c3aead7cd45e5fbca06f940571f0b05e059a9caa486ea69b58dd3104e1027d844128052

  • SSDEEP

    1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1I:amZ+luXwy2f9LDhDI

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      66441a347f52ca84064076fabbf1b2000601f57ed9c14efa5f6eb6e16b2d2eaf.exe

    • Size

      57KB

    • MD5

      5c0ef68df5b0e2ddd3fe0cae13603427

    • SHA1

      ca7111f6fbb92c7d2a3d730af92fc8cb05747b07

    • SHA256

      66441a347f52ca84064076fabbf1b2000601f57ed9c14efa5f6eb6e16b2d2eaf

    • SHA512

      2b10b2e9458fc22dc17678613dbef840da8bfe333c695c6290e389858c3aead7cd45e5fbca06f940571f0b05e059a9caa486ea69b58dd3104e1027d844128052

    • SSDEEP

      1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1I:amZ+luXwy2f9LDhDI

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks